From 2faf280893ba803b27fe73c4c49eb6cc97e3c934 Mon Sep 17 00:00:00 2001 From: Kristian Krsnik Date: Tue, 9 Apr 2024 13:35:58 +0200 Subject: [PATCH] updated --- slides/slides.md | 99 ++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 99 insertions(+) create mode 100644 slides/slides.md diff --git a/slides/slides.md b/slides/slides.md new file mode 100644 index 0000000..3f2558a --- /dev/null +++ b/slides/slides.md @@ -0,0 +1,99 @@ +```txt +/nix / /persist + +------------------------+ + /store/x -|-> /var/x | + | /var/lib/bluetooth <-|- /var/lib/bluetooth + /store/y -|-> /bin/y | + | /home/admin/.local <-|- /home/admin/.local + /store/z -|-> /etc/z | + +------------------------+ +``` + +```nix +{...}: { + boot.initrd.postDeviceCommands = lib.mkAfter '' + mkdir /btrfs_tmp + mount /dev/mapper/crypted /btrfs_tmp + if [[ -e /btrfs_tmp/root ]]; then + mkdir -p /btrfs_tmp/old_roots + timestamp=$(date --date="@$(stat -c %Y /btrfs_tmp/root)" "+%Y-%m-%-d_%H:%M:%S") + mv /btrfs_tmp/root "/btrfs_tmp/old_roots/$timestamp" + fi + + delete_subvolume_recursively() { + IFS=$'\n' + for i in $(btrfs subvolume list -o "$1" | cut -f 9- -d ' '); do + delete_subvolume_recursively "/btrfs_tmp/$i" + done + btrfs subvolume delete "$1" + } + + for i in $(find /btrfs_tmp/old_roots/ -maxdepth 1 -mtime +30); do + delete_subvolume_recursively "$i" + done + + btrfs subvolume create /btrfs_tmp/root + umount /btrfs_tmp + ''; +} +``` + +```nix +{ + inputs = { + impermanence = { + url = "github:nix-community/impermanence"; + }; + }; + + outputs = {self, ...} @ inputs: let + system = "x86_64-linux"; + pkgs = inputs.nixpkgs.legacyPackages.${system}; + in { + nixosConfigurations = { + default = inputs.nixpkgs.lib.nixosSystem { + inherit system; + + modules = [ + inputs.impermanence.nixosModules.impermanence + ... + ]; + }; + }; + } +} +``` + +```nix +{...}: { + fileSystems."/persist".neededForBoot = true; + environment.persistence."/persist" = { + hideMounts = true; + directories = [ + { + directory = "/etc/nixos"; + user = "demo"; + mode = "u=rwx,g=rx,o=rx"; + } + "/var/log" + "/var/lib/bluetooth" + "/var/lib/nixos" + "/var/lib/systemd/coredump" + "/etc/NetworkManager/system-connections" + ]; + files = [ + "/etc/machine-id" + { + file = "/var/keys/secret_file"; + parentDirectory = {mode = "u=rwx,g=,o=";}; + } + ]; + + users."demo" = { + directories = [ + "this-will-persist" + ]; + }; + }; +} +```